@upx-us/shield 0.7.12 → 0.7.13

package/CHANGELOG.md

@@ -4,6 +4,14 @@ All notable changes to this project will be documented in this file.
 
 ---
 
+## [0.7.13] — 2026-03-16
+
+### Fixed
+
+- **`openclaw shield` commands missing after auto-update** — the auto-updater was deleting the `integrity` field from `openclaw.json` without recomputing it. OpenClaw 2026.3.13+ requires this field to wire plugin CLI commands; without it the plugin loads but `openclaw shield status` and all shield commands fail with "unknown command". The updater now computes the correct SRI `sha512` integrity hash from the downloaded tarball and writes it to the install record.
+
+---
+
 ## [0.7.12] — 2026-03-16
 
 ### Fixed

package/dist/src/updater.js

@@ -342,7 +342,7 @@ function restoreFromBackup(backupPath) {
         return false;
     }
 }
-function updateOpenClawPluginMetadata(newVersion, shasum) {
+function updateOpenClawPluginMetadata(newVersion, shasum, tarballBuffer) {
     const configPath = (0, path_1.join)((0, os_1.homedir)(), '.openclaw', 'openclaw.json');
     try {
         if (!(0, fs_1.existsSync)(configPath))
@@ -355,7 +355,13 @@ function updateOpenClawPluginMetadata(newVersion, shasum) {
         install.version = newVersion;
         install.resolvedVersion = newVersion;
         install.resolvedSpec = `${PACKAGE_NAME}@${newVersion}`;
-        delete install.integrity;
+        if (tarballBuffer) {
+            const integrityHash = (0, crypto_1.createHash)('sha512').update(tarballBuffer).digest('base64');
+            install.integrity = `sha512-${integrityHash}`;
+        }
+        else {
+            delete install.integrity;
+        }
         if (shasum) {
             install.shasum = shasum;
         }
@@ -407,7 +413,8 @@ function downloadAndInstall(targetVersion) {
             return false;
         }
         const tarball = (0, path_1.join)(tmpDir, tarballs[0]);
-        const tarballShasum = (0, crypto_1.createHash)('sha1').update((0, fs_1.readFileSync)(tarball)).digest('hex');
+        const tarballBuffer = (0, fs_1.readFileSync)(tarball);
+        const tarballShasum = (0, crypto_1.createHash)('sha1').update(tarballBuffer).digest('hex');
         const stagingDir = (0, path_1.join)(tmpDir, 'staging');
         (0, fs_1.mkdirSync)(stagingDir, { recursive: true });
         (0, child_process_1.execSync)(`tar xzf "${tarball}" -C "${stagingDir}" --strip-components=1`, {
@@ -442,7 +449,7 @@ function downloadAndInstall(targetVersion) {
             (0, fs_1.rmSync)((0, path_1.join)(PLUGIN_DIR, entry), { recursive: true, force: true });
         }
         copyRecursive(stagingDir, PLUGIN_DIR);
-        updateOpenClawPluginMetadata(targetVersion, tarballShasum);
+        updateOpenClawPluginMetadata(targetVersion, tarballShasum, tarballBuffer);
         log.info('updater', `Installed ${PACKAGE_NAME}@${targetVersion} successfully`);
         return true;
     }

package/openclaw.plugin.json

@@ -2,7 +2,7 @@
   "id": "shield",
   "name": "OpenClaw Shield",
   "description": "Real-time security monitoring — streams enriched, redacted security events to the Shield detection platform.",
-  "version": "0.7.12",
+  "version": "0.7.13",
   "skills": [
     "./skills"
   ],

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@upx-us/shield",
-  "version": "0.7.12",
+  "version": "0.7.13",
   "description": "Security monitoring plugin for OpenClaw agents — streams enriched security events to the Shield detection platform",
   "main": "dist/index.js",
   "types": "dist/index.d.ts",